Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/j3TwiufTFjwnJfKxHE_3MeI9wHc.roa
File:                     j3TwiufTFjwnJfKxHE_3MeI9wHc.roa (raw, json)
Hash identifier:          V73q6DZvN7upGs4mHoNTFBWG8h/VOIC3QzCvhrM/dqc=
Subject key identifier:   8F:74:F0:8A:E7:D3:16:3C:27:25:F2:B1:1C:4F:F7:31:E2:3D:C0:77
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       0185C2C9BF695664F524BB9F80A6E7AE8B54
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/j3TwiufTFjwnJfKxHE_3MeI9wHc.roa
Signing time:             Wed 18 Jan 2023 02:51:19 +0000
ROA not before:           Wed 18 Jan 2023 02:51:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        45.149.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 09:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c2:c9:bf:69:56:64:f5:24:bb:9f:80:a6:e7:ae:8b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Jan 18 02:51:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f74f08ae7d3163c2725f2b11c4ff731e23dc077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:24:6f:b0:12:7e:51:89:a7:d8:78:79:06:
                    ae:30:df:bc:8e:f2:8a:a6:f1:60:cd:f3:c7:1f:99:
                    3f:c2:b0:ba:fd:51:94:ca:cc:e3:b6:53:97:0d:c5:
                    86:49:88:dd:c5:25:b1:9f:c0:83:4d:55:98:a3:a2:
                    f2:9b:59:53:01:07:6c:ee:3d:f3:ed:97:ad:b6:e8:
                    a4:f0:3e:27:7f:fe:0c:59:4e:54:ee:b6:c6:d1:3f:
                    ca:1c:c7:2d:1b:66:a6:5d:93:0c:ac:3c:e6:fb:1e:
                    3e:8d:47:4a:2f:2b:90:2c:40:d3:fd:46:84:c3:0e:
                    85:74:72:6f:c4:4f:74:a4:3c:a9:72:17:44:cd:7c:
                    35:9a:74:d7:19:b9:a4:ff:d3:c7:35:93:5d:93:fc:
                    f8:a1:de:e0:32:c6:8b:e4:ad:a5:94:5f:83:d2:52:
                    ad:7d:ce:ea:a2:94:71:1c:6d:6a:27:66:23:af:6f:
                    77:0e:7f:4d:31:b1:87:fb:4c:d1:f1:52:e9:2d:1f:
                    e7:8d:84:6c:0b:19:85:70:c6:f5:d1:73:dc:6c:6d:
                    23:58:33:c1:c0:6d:28:c6:35:9c:bf:6a:cf:05:cf:
                    2d:cb:77:8d:53:a6:61:45:7d:58:68:3d:35:22:fe:
                    49:4c:91:e4:9d:f9:47:eb:82:f1:71:7f:1a:d1:90:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:F0:8A:E7:D3:16:3C:27:25:F2:B1:1C:4F:F7:31:E2:3D:C0:77
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/j3TwiufTFjwnJfKxHE_3MeI9wHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:26:74:c9:da:18:e0:cf:f1:fb:f3:0c:d1:46:43:2b:d2:
         cc:71:a6:6a:de:05:f5:33:24:db:ce:5c:0c:04:55:0d:fe:ff:
         62:bd:ed:ee:10:a4:ba:8a:5f:76:b2:ed:0b:de:e1:0e:59:aa:
         60:dd:7d:a4:e1:d7:ec:5f:f5:f9:de:7d:3c:63:80:93:a1:92:
         24:1a:56:b3:12:bf:b6:51:eb:d3:c0:b9:94:28:7b:98:82:75:
         71:95:92:68:88:52:75:ca:41:41:a6:90:6d:98:e7:d2:85:0d:
         6d:d8:6a:e1:0d:fd:2e:c1:b1:19:00:b2:73:68:8c:2d:ff:8e:
         07:27:6b:e8:31:4d:b5:82:58:37:e9:f5:f8:84:c3:be:2f:11:
         80:43:4f:b8:34:03:c0:c8:3c:94:0b:42:7d:09:5e:64:1a:33:
         4e:1a:67:4d:04:ab:f1:c5:78:72:87:c0:8d:25:f3:f1:ee:c2:
         fa:8d:8c:78:72:6e:8b:f8:e7:89:9e:56:e7:c5:13:3d:72:44:
         1c:ba:1f:9c:6a:20:66:48:23:d0:ce:95:86:a6:73:93:d6:fe:
         62:84:c0:54:3d:4f:bf:d6:d5:78:ca:0e:e5:e0:0a:07:2a:03:
         41:d6:1e:46:91:c9:9a:f7:c1:05:0b:b6:9e:07:b5:1e:8a:b9:
         b0:e8:21:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXCyb9pVmT1JLufgKbnrotUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwMTE4MDI1MTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjc0ZjA4YWU3ZDMxNjNjMjcyNWYyYjExYzRmZjczMWUyM2RjMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq0kb7ASflGJp9h4eQauMN+8jvKK
pvFgzfPHH5k/wrC6/VGUyszjtlOXDcWGSYjdxSWxn8CDTVWYo6Lym1lTAQds7j3z
7Zettuik8D4nf/4MWU5U7rbG0T/KHMctG2amXZMMrDzm+x4+jUdKLyuQLEDT/UaE
ww6FdHJvxE90pDypchdEzXw1mnTXGbmk/9PHNZNdk/z4od7gMsaL5K2llF+D0lKt
fc7qopRxHG1qJ2Yjr293Dn9NMbGH+0zR8VLpLR/njYRsCxmFcMb10XPcbG0jWDPB
wG0oxjWcv2rPBc8ty3eNU6ZhRX1YaD01Iv5JTJHknflH64LxcX8a0ZDiNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI908Irn0xY8JyXysRxP9zHiPcB3MB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvajNUd2l1ZlRGanduSmZLeEhFXzNNZUk5d0hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWkMA0G
CSqGSIb3DQEBCwUAA4IBAQCLDiZ0ydoY4M/x+/MM0UZDK9LMcaZq3gX1MyTbzlwM
BFUN/v9ive3uEKS6il92su0L3uEOWapg3X2k4dfsX/X53n08Y4CToZIkGlazEr+2
UevTwLmUKHuYgnVxlZJoiFJ1ykFBppBtmOfShQ1t2GrhDf0uwbEZALJzaIwt/44H
J2voMU21glg36fX4hMO+LxGAQ0+4NAPAyDyUC0J9CV5kGjNOGmdNBKvxxXhyh8CN
JfPx7sL6jYx4cm6L+OeJnlbnxRM9ckQcuh+caiBmSCPQzpWGpnOT1v5ihMBUPU+/
1tV4yg7l4AoHKgNB1h5Gkcma98EFC7aeB7Ueirmw6CFN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org